PT-2018-14237

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered in the software, where the returnto parameter of the "account change.php" endpoint is vulnerable to an open redirect. Recommendations For version 2.5.4, avoid using the returnto...